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DETAILED ACTION 

1 . Applicant's arguments filed April 17, 2008, have been fully considered. 

2. Claim 1 is pending and has been examined. 

Response to Amendment 

3. The following claim drafted by the examiner and considered to distinguish 
patentably over the art of record in this application, is presented to applicant for 
consideration: 

EXAMINER'S AMENDMENT 

1 (currently amended). A computer-readable medium storing computer-executable 
instructions that when executed by a processor cause a computer to perform a method 
for creating a preconfiqured network, the method comprising: 

We croato creating a plurality of nodes of a TCP/IP ("transmission control 

protocol / internet protocol") network capable of encrypted communications as 

follows: 

w e i nsta ll installing a "S l ackware" li nux d i str i but i on an operating system to 
a target partition of a computer hard drive mass storage device residing in a 
computer wh i ch sha ll b e conv e rt e d to an i so9660 f ile svst e m (a comput e r 
operat i ng system wh i ch runs from o Compact D i sc Road On l y Memory d i sc 
("CDROM") ; 

wo comp il e compiling an operating system kernel supporting IPSec 
(Internet Protocol Security) and a plurality of virtual disks a sp e c i a l L i nux k e rn el 
basod on tho L i nux 2A ser i es wh i ch has boon a l torod to support tho "FrooSWAN 
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(o trade nomo) I ntornot Protocol Secur i ty" (" I PSEC") system for TCP/ I P 
encrypt i on, as we ll as 8 "romd i okc" (s i mu l ation of externa l mass storage dov i coo 
i n m e mory) of s i z e 16384 k il obyt e s e ach, and 

copying the compiled operating system kernel to the target partition -eeev 
th i s k e rn el to th e targ e t part i t i on ; 

wo copy f il es assoc i ated with, and a product of, the comp il at i on of both the 
kerne l and "FrooSWAN I PSEC" to the target part i t i on; 

compiling an authentication server and copying associated files to the 
target partition; 

wo comp il e the M I T ("Massachusetts I nst i tute of Techno l ogy") product 
K e rb e ros 5 ("K e rb e ros system for i nt e rn e t auth e nt i cat i on, author i zat i on and 
oocur i ty, vers i on sor i os 5") and copy assoc i atod f il os to tho target part i t i on; 

compiling a domain name service (DNS) server and copying associated 
files to the target partition; 

w e us e scr i pts to g e n e rat e f i l e s wh i ch ar e assoc i at e d w i th th e "B I ND 9 
namosorvor" (a standard product of tho I ntornot Systemc ConGort i um), to prov i de 
th e ab ili ty to do forward and r e v e rs e lookup i n DNS ("doma i n nam e s e rv i c e ", a 
funct i on of B I ND 9 nam e s e rv e r) and w e copy th e s e f ile s to th e targ e t part i t i on; 

w e r e start restarting the computer to boot from the target partition; 

initializing the authentication server which will control authentication and 
authorization functions for the network; 



Application/Control Number: 10/623,631 Page 4 

Art Unit: 2136 

w e us e scr i pts to i n i t i a li z e th e "Kerb e ros KDC" ("K e rb e ros v e rs i on s e r ie s 5 
Korboros Data Contor") wh i ch w ill contro l authent i cat i on and author i zat i on 
funct i ons for th e TCP/ I P subn e t w e w ill cr e at e ; 

wo use scr i pts to croato creating instances within the authentication server 
"K e rb e ros KDC" of specific host (a host may b e any comput e r w i th a TCP/ I P 
capab ili ty) and user names and passwords; 

w e us e scr i pts to g e n e rat e generating , in a specific directory, multiple 
unique instances of authentication and authorization information for the 
authentication server "K e rb e ros « k e ytabs" (cod e d i nformat i on us e d by K e rberos 
for authent i cat i on and author i zat i on) each of which is based on information 
provided by the configuration files for the domain name service (DNS) server 
"B I ND 9 namooorvor" ; 

w e us e scr i pts to mod i fy th e f i l e s "/ e tc/ i ps e c.conf and 7 e tc/ i ps e c.s e cr e ts" 
to conf i gure tho "FrooSWAN I PSEC" configuring communications parameters for 
IPSec such as conn e ct i on nam e , connect i on typ e , and conn e ct i on start up and 
rout i ng as we ll as to supp l y "pro shared key" (an encrypt i on feature and 
auth e nt i cat i on m e thod of "Fr ee SWAN IPSEC") and li sts of I P (" i nt e rn e t protoco l ") 
addr e ss e s to wh i ch that pr e shar e d k e y may app l y ; 

configuring start-up parameters for the operating system; 

wo mod i fy and add start up scr i pt fi l es i n tho d i rectory "/etc/red" to ensure 
proper start up of a ll systems at boot t i mo; 

configuring the authentication server: 
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w e mod i fy th e f ile "/ e tc/ i n e td.conf to act i vat e funct i ons of K e rb e ros 5" to 
operate as noodod; 

w e g e n e rat e and wr i t e a f ile 7root/.krb5_ l og i n" to a ll ow sup e rus e r acc e ss 
v i a "Korboros 5" authont i catod l ogin method; 

configuring the operating system loader; 

wo gonorato or mod i fy tho filo "/otc/ lil o.conf to proper l y conf i gure the 
"L I LQ" L i nux K e rn el Boot l oad e r and th e n w e op e rat e th e boot l oad e r i n 
conf i gurat i on modo to sot up tho boot sector and boot d i rector i es of tho 
f ile syst e m; 

rebooting to an original instance of the operating system to begin per-node 
generation of iso9669 disc images to be written to storage media; 

wo reboot to tho or i g i na l instance of tho operat i ng oyotom to beg i n tho per 
nod e g e n e rat i on of th e i so9660 i mag e s wh i ch w ill b e wr i tt e n to CDROM m e d i a; 

moving the authentication and authorization information for the 
authentication server from the target partition to a local directory; 

we movo tho i nd i v i dua l "Korboros 5 koytabs" from tho target part i t i on to a 
l oca l d i rectory; 

copying target partition to a processing partition; 

w e copy a ll f ile s from th e targ e t part i tion to a "proc e ss i ng part i t i on" wh i ch 
serves as tho temp l ate from which tho i so9660 i mages w ill bo gonoratod; 



Application/Control Number: 10/623,631 
Art Unit: 2136 



Page 6 



iteratively generate unique iso9669 image information, including internet 
protocol (IP) address, hostname information, and routing information for the 
plurality of nodes, from the processing partition and write it to storage media. 

wo uso scr i pts wh i ch i torat i voly overwr i te i n mu l t i p l e passes to odd to th i s 
"proc e ss i ng part i t i on": us e mom e , group and p e rm i ss i ons i nformat i on, 
".krbSJog i n" i nformat i on and tho appropriate "Korboros 5 koytob" as we ll as on 
appropr i ate "/otc/krbS.conf f il e to i dentify the oppropr i oto "Korboros KDC", I P 
(" I nternet Protoco l ") address and network conf i gurat i on i nformot i on i nc l ud i ng 
d e s i gnat i on of appropr i at e "DNS names e rv e r" and rout i ng i nformat i on, and then 

wo generate tho i so9660 i mago and wr i te i t to CDPvOM med i o, ropoot i ng 
unt il a ll un i ts compr i s e d i n this n e twork ar e f i n i sh e d b ei ng g e n e rat e d and wr i tt e n. 
2. (cancelled) 

Information Disclosure Statement 

4. It is noted that no Information Disclosure Statement has been filed on this 
application. 

5. In June 2004, the USPTO ceased mailing paper copies of cited U.S. patents and 
U.S. patent application publications with all Office actions. See "USPTO to Provide 
Electronic Access to Cited U.S. Patent References with Office Actions and Cease 
Supplying Paper Copies," 1282 O.G. 109 (May 18, 2004). Foreign patent documents 
and non-patent literature will continue to be provided to the applicant on paper. 
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6. All U.S. patents and U.S. patent application publications are available free of 
charge from the USPTO web site (www.uspto.gov/patft/index.html), for a fee from the 
Office of Public Records (http://ebiz1 .uspto.gov/oems25p/index.html), and from 
commercial sources. Copies are also available at the Patent and Trademark Depository 
Libraries (PTDLs). A list of the PTDLs may be found on the USPTO web site 
(www.uspto.gov/web/offices/ac/ido/ptdl/ptdlib_1 .html). Additionally, a new feature in the 
Office's Private Patent Application Information Retrieval system (PAIR), E-Patent 
Reference, is available for downloading and printing of U.S. patents and U.S. patent 
application publications cited in U.S. Office Actions. 

STEPS TO USE THE E-PATENT REFERENCE FEATURE 

7. Access to Private PAIR is required to utilize E-Patent 
Reference. If you do not already have access to Private PAIR, 
the Office urges practitioners and applicants not represented by 
a practitioner to: (1) obtain a no-cost USPTO Public Key 
Infrastructure (PKI) digital certificate; (2) obtain a USPTO 
customer number; (3) associate all of their pending and new 
application filings with their customer number; (4) install free 
software (supplied by the Office) required to access Private 
PAIR and the E-Patent Reference; and (5) make appropriate 
arrangements for Internet access. 



Instructions for performing the 5 steps: 
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Step 1: Full instructions for obtaining a PKI digital certificate are available at the Office's 
Electronic Business Center (EBC) web page (www.uspto.gov/ebc/downloads.html). 
Note that a notarized signature will be required to obtain a digital certificate. 

Step 2: To get a Customer Number, download and complete the Customer Number 
Request form, PTO-SB/125, from the USPTO web site 

(www.uspto.gov/web/forms/sb0125.pdf). The completed form can be transmitted by 
facsimile to the Patent Electronic Business Center at (571) 273-0177, or mailed to the 
address on the form. If you are a registered attorney or agent, your registration number 
must be associated with your customer number. This association is accomplished by 
adding your registration number to the Customer Number Request form. 

Step 3: A description of associating a customer number with the correspondence 
address of an application is described at the EBC Web page 
(www.uspto.gov/ebc/registration_pair. html). 

Step 4: The software for electronic filing is available for downloading at 
www.uspto.gov/ebc. Users can also contact the EFS Help Desk at (571) 272-4100 and 
request a copy of the software on compact disc. Users will also need Adobe Acrobat 
Reader, which is available through a link from the USPTO web site. 
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Step 5: Internet access will be required which applicants may obtain through a supplier 
of their own choice. As images of large documents must be downloaded, high-speed 
Internet access is recommended. 

8. The E-Patent Reference feature is accessed using a button on the Private PAIR 
screen. Ordinarily all of the cited U.S. patent and U.S. patent application publication 
references will be available over the Internet using the Office's new E-Patent Reference 
feature. The size of the references to be downloaded will be displayed by E-Patent 
Reference so the download time can be estimated. Applicants and registered 
practitioners can select to download all of the references or any combination of cited 
references. Selected references will be downloaded as complete documents in Portable 
Document Format (PDF). The downloaded documents can be viewed and printed using 
commercially available software, such as ADOBE® READER®. ADOBE® READER® 
is available free of charge from Adobe Systems Incorporated 
(www.adobe.com/products/acrobat/readermain.html). 

Claim Rejections - 35 USC §112 

9. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

10. Claim 1 is rejected as failing to define the invention in the manner required by 35 
U.S.C. 112, second paragraph. 

1 1 . The claim(s) are narrative in form and replete with indefinite and functional or 
operational language. The structure which goes to make up the device must be clearly 
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and positively specified. The structure must be organized and correlated in such a 
manner as to present a complete operative device. The claim(s) must be in one 
sentence form only. Note the format of the claims in the patent(s) cited. Please see the 
amended draft claim above. 

Conclusion 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to DAVID CERVETTI whose telephone number is 

(571 )272-5861 . The examiner can normally be reached on Monday-Tuesday and 
Thursday-Friday. 

1 3. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

14. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/David Garcia Cervetti/ 
Primary Examiner, Art Unit 2136 



